Infermedica

Polish AI symptom checker and clinical triage platform for digital health

Contractbook

Danish AI-powered contract lifecycle management for European businesses

Infermedica

Excellent

24/25

Contractbook

Excellent

22/25

Score Breakdown

DimensionInfermedicaContractbook

Data Residency

Where is your data stored and processed?

Infermedica: EU data centres (Poland and Germany). Polish incorporation means EU law governs by default. No US cloud dependency. Strong data residency for healthcare AI.

Contractbook: EU data residency on AWS EU regions; Danish company with EU-compliant data processing

5/5

EU data centres (Poland and Germany). Polish incorporation means EU law governs by default. No US cloud dependency. Strong data residency for healthcare AI.

4/5

EU data residency on AWS EU regions; Danish company with EU-compliant data processing

Legal Jurisdiction

Which laws govern the company and your data?

Infermedica: Polish Sp. z o.o. under Polish and EU law. GDPR and EU AI Act apply as corporate law. UODO (Polish DPA) is the lead supervisory authority. No CLOUD Act exposure.

Contractbook: Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

5/5

Polish Sp. z o.o. under Polish and EU law. GDPR and EU AI Act apply as corporate law. UODO (Polish DPA) is the lead supervisory authority. No CLOUD Act exposure.

5/5

Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

Data Retention & Training

Is your data used for model training?

Infermedica: Patient triage data not used for cross-customer model training. API architecture means customer data stays under customer control. GDPR-compliant DPA available for all customers.

Contractbook: No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

5/5

Patient triage data not used for cross-customer model training. API architecture means customer data stays under customer control. GDPR-compliant DPA available for all customers.

5/5

No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Infermedica: ISO 27001 and ISO 27799 (health informatics security) certifications. CE-marked as Class I medical device under EU MDR. Strong certification posture for a medical AI company.

Contractbook: SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

4/5

ISO 27001 and ISO 27799 (health informatics security) certifications. CE-marked as Class I medical device under EU MDR. Strong certification posture for a medical AI company.

3/5

SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

Regulatory Fit

Suitability for regulated industries and professional services

Infermedica: Excellent fit for EU healthcare organisations, insurers, and digital health platforms. CE-marked under MDR, GDPR-native, EU-incorporated, and multilingual (30+ languages). One of the strongest EU-sovereign medical AI platforms for triage and symptom assessment.

Contractbook: Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

5/5

Excellent fit for EU healthcare organisations, insurers, and digital health platforms. CE-marked under MDR, GDPR-native, EU-incorporated, and multilingual (30+ languages). One of the strongest EU-sovereign medical AI platforms for triage and symptom assessment.

5/5

Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

Total Score

24/25

22/25

Best For

Infermedica

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (Datatilsynet, CNIL); privacy-conscious teams who need strong data retention controls.

Contractbook

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (CNIL, BaFin); privacy-conscious teams who need strong data retention controls.

Detailed Comparison

Contractbook vs Infermedica: Trust & Compliance Comparison

Contractbook (Contractbook, DK) scores 22/25 overall with a Gold (Excellent) trust badge. Danish AI-powered contract lifecycle management for European businesses. Infermedica (Infermedica, PL) scores 24/25 with a Gold (Excellent) trust badge. Polish AI symptom checker and clinical triage platform for digital health.

Dimension-by-Dimension Breakdown

#### Data Residency

Infermedica leads with 5/5 vs 4/5.

●Contractbook (4/5): EU data residency on AWS EU regions; Danish company with EU-compliant data processing

●Infermedica (5/5): EU data centres (Poland and Germany). Polish incorporation means EU law governs by default. No US cloud dependency. Strong data residency for healthcare AI.

#### Legal Jurisdiction

Both score equally at 5/5.

●Contractbook (5/5): Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

●Infermedica (5/5): Polish Sp. z o.o. under Polish and EU law. GDPR and EU AI Act apply as corporate law. UODO (Polish DPA) is the lead supervisory authority. No CLOUD Act exposure.

#### Data Retention & Training

Both score equally at 5/5.

●Contractbook (5/5): No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

●Infermedica (5/5): Patient triage data not used for cross-customer model training. API architecture means customer data stays under customer control. GDPR-compliant DPA available for all customers.

#### Certifications

Infermedica leads with 4/5 vs 3/5.

●Contractbook (3/5): SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

●Infermedica (4/5): ISO 27001 and ISO 27799 (health informatics security) certifications. CE-marked as Class I medical device under EU MDR. Strong certification posture for a medical AI company.

#### Regulatory Fit

Both score equally at 5/5.

●Contractbook (5/5): Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

●Infermedica (5/5): Excellent fit for EU healthcare organisations, insurers, and digital health platforms. CE-marked under MDR, GDPR-native, EU-incorporated, and multilingual (30+ languages). One of the strongest EU-sovereign medical AI platforms for triage and symptom assessment.

Certifications at a Glance

Certification	Contractbook	Infermedica
GDPR	Yes	No
ISO 27001	No	Yes
ISO 27799	No	Yes
SOC 2 Type II	Yes	No

Overall Verdict

Infermedica has a clear trust advantage, scoring 24/25 compared to Contractbook's 22/25. Infermedica particularly excels in data residency, certifications.

Frequently Asked Questions

Which is better for EU compliance, Infermedica or Contractbook?

Infermedica has a TrustKit score of 24/25 while Contractbook scores 22/25. Infermedica currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Infermedica and Contractbook compare on data residency?

Infermedica scores 5/5 for data residency (EU data centres (Poland and Germany). Polish incorporation means EU law governs by default. No US cloud dependency. Strong data residency for healthcare AI.), while Contractbook scores 4/5 (EU data residency on AWS EU regions; Danish company with EU-compliant data processing).

Are Infermedica and Contractbook GDPR compliant?

Both tools are assessed across five compliance dimensions. Infermedica has a regulatory fit score of 5/5 and Contractbook scores 5/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool